Blog
Practical observations from Microsoft 365 environments: licensing, security, and what's changing. Written from real client work.
What a Microsoft 365 security audit covers and what the report must contain
What a Microsoft 365 audit means, what it goes through, what access the auditor needs, what a proper report contains and how often an audit is worth repeating.
Read more →Before Copilot: who can see what?
Copilot does not bypass permissions, but it finds everything they allow. Where oversharing comes from, which tools find it and where to start.
Read more →The licence bill keeps growing, and nobody asks why
Why a Microsoft 365 licence bill almost always contains waste, what the summer 2026 packaging changes and the new Copilot options mean, and where to start the review.
Read more →MFA is on, and the account was still breached
Modern phishing bypasses app-based MFA. What phishing-resistant authentication requires in practice, what it costs and where to start.
Read more →Entra Domain Services: the last step in retiring on-prem AD
What Entra Domain Services is, four situations where it solved a real problem, when not to use it and what to know before deployment.
Read more →Windows 365 or a traditional remote desktop – when does a Cloud PC make sense?
When Windows 365 makes sense, what Flex, Reserve and GPU support mean in practice, and how to size the licensing sensibly.
Read more →